Created attachment 220528[details][diff][review]
atsui: Add missing check of return-value of malloc.
Here's a patch for this specific issue.
This has already been committed to upstream cairo, (in some 1.1.3 and will be in all descendant snapshots/releases).
Note that there's another unchecked malloc later in the same file. The patch adds a comment for it, but doesn't fix it. That's a job for the ATSUI maintainer as I would probably get it wrong if I tried it myself.